If you're paging then that looks like the problem, but do check the
output of df. Here's the output from my own machine as listed bellow.
Last login: Sun Nov 9 14:19:36 2008 from oliver.diaslan.net
Filesystem Size Used Avail Use% Mounted on
rootfs 8.0G 321M 7.6G 5% /
/dev/root 8.0G 321M 7.6G 5% /
/dev/harddisk1 10M 4.9M 5.2M 49% /boot
/dev/harddisk2 66G 5.3G 57G 9% /var/log
/boot is where the kernel(s) live(s).
/ is were the system (et. al.) lives
/var/log is where the logs *and* proxy data lives, thanks to some
You don't want to run out of disk space...
jose "dot" dias "at" DiasLan "dot" net
> -----Original Message-----
> From: Tod [mailto:listacctc@...]
> Sent: November 23, 2008 12:27 PM
> To: Gilles Espinasse
> Cc: IPCOP USER; Jose A. Dias
> Subject: Re: [IPCop-user] IPCop v1.4.21 Snort Rules Update
> On 11/23/2008 10:08 AM, Gilles Espinasse wrote:
> >> My box really has a problem downloading and installing snort rules.
> >> When I try and update it works for a while and then stops. It
> >> be doing something but the dates of the rule file never changes.
> > I think this is a space issue on main partition when your disk is
> > Update file is big and the diff with installed rules required more
> > than available.
> > What show df?
> > If you not already have made that, select the kernel, this should
> > enought space.
> > If you already have a kernel selected (that's the case of my test
> > we would need a different way to unpack, looking at space in
> and /
> > and selecting the biggest free space.
> > Gilles
> > This SF.Net email is sponsored by the Moblin Your Move Developer's
> > Build the coolest Linux based applications with Moblin SDK & win
> > Grand prize is a trip for two to an Open Source event anywhere in
> > http://moblin-contest.org/redirect.php?banner_id=100&url=/
> > _______________________________________________
> > IPCop-user mailing list
> > IPCop-user@...
> > https://lists.sourceforge.net/lists/listinfo/ipcop-user
> Thanks Gilles and Jose. This machine needs a memory upgrade, I've
> getting warnings from the snort configuration page about swapping so
> that is most surely the issue.
> Kindest regards,